,i  #aae? ,,congress  #b;d ,session  ,h4
 ,r4 #feej  ,,9 ,,! ,,h\se ,,(          
,,repres5tatives  ,july #bf1 #bjah,mr4  
,connolly 7= himself & ,mr4 ,mead[s7    
introduc$ ! foll[+ bill2 :i* 0 ref]r$ to
 ! ,committee on ,ov]sight & ,gov]nm5t  
,re=m  ,a ,,bill  ,to enhance !         
innovation1 security1 & availability (  
,f$]al ,gov]nm5t cl\d s]vices by        
e/abli%+ ! ,f$]al ,risk & ,au?orization 
,managem5t ,program )9 ! ,(fice (       
,managem5t & ,budget ,(fice (           
,electronic ,gov]nm5t & by e/abli%+ a   
risk managem5t1 au?orization1 & cont9u\s
 monitor+ process to enable ! ,f$]al    
,gov]nm5t to lev]age cl\d comput+       
s]vices us+ a risk-bas$ approa* consi/5t
 ) ! ,f$]al ,in=mation ,security ,re=m  
,act ( #bjad & cl\d-bas$ op]ations1 & = 
o!r purposes4  #a4 ,%ort title ,?is ,act
 may be cit$ z ! ,f$]al ,risk &         
,au?orization ,managem5t ,program ,re=m 
,act ( #bjah or ! ,fed,r,a,m,p          
,au?orization ,act4  #b4 ,codification (
 ! ,fed,r,a,m,p program  7a7 ,am5dm5t   

,*apt] #cf ( title #dd1 ,unit$ ,/ates   
,code1 is am5d$ by add+ at ! end !      
foll[+ new sections3  #cfjg4 ,f$]al     
,risk & ,au?orization ,managem5t        
,program  7a7 ,e/abli%m5t ,!re is       
e/abli%$ )9 ! ,g5]al ,s]vices           
,adm9i/ration1 an (fice to be kn[n z !  
,fed,r,a,m,p ,program ,managem5t ,(fice 
t %all be responsible = ! ,f$]al ,risk &
 ,au?orization ,managem5t ,program4     
,fed,r,a,m,p is a specific ,gov]nm5t    
c]tification program t exam9es &        
accr$its cl\d s]vice provid]s t (f]     
,f$]al cl\d comput+ s]vices = sale1     
lease1 or pur*ase to ,f$]al ag5cy cl\d  
cu/om]s4 ,! ,fed,r,a,m,p ,program       
,managem5t ,(fice embodies ! goal ( a   
qualify once1 use _m times process ?r\gh
 ! issuance ( c]tifications 9 ! =m (    
provisional au?orizations to op]ate4    
7b7 ,compon5ts ( ,fed,r,a,m,p ,!re are  
e/abli%$ z compon5ts ( ,fed,r,a,m,p !   
,jo9t ,au?orization ,bo>d & ! ,program  
,managem5t ,(fice1 or su* successor     
(fices z ! ,(fice ( ,managem5t &        

,budget1 ?r\gh ! ,(fice ( ,electronic   
,gov]nm5t may det]m9e4  7c7 ,fed,r,a,m,p
 duties ,! ,director ( ! ,(fice (       
,managem5t & ,budget & ! ,adm9i/rator ( 
,g5]al ,s]vices1 or _! designees1 %all  
"w toge!r to d ! foll[+3  7#a7 ,issue   
guidance on categories & *>act]i/ics (  
in=mation te*nology goods or s]vices t  
are )9 ! jurisdiction ( ,fed,r,a,m,p & t
 require ,fed,r,a,m,p c]tification4     
7#b7 ,issue guidance = ! e/abli%m5t &   
implem5tation ( ,fed,r,a,m,p to conduct 
security assessm5ts1 reviews1 &         
appropriate ov]sight ( cont9u\s monitor+
 ( cl\d s]vices us$ by ag5cies4  7#c7 ,n
 lat] ?an #ahj days aft] ! date ( !     
enactm5t ( ?is section1 & annually      
!reaft]1 submit to ,congress a report on
 ! /atus & p]=mance ( ! ,fed,r,a,m,p    
,program ,managem5t ,(fice1 includ+ !   
/atus & disposition ( waiv] reque/s to  
,fed,r,a,m,p submitt$ to ! ,fed,r,a,m,p 
,program ,managem5t ,(fice by ag5cies & 
a description ( & progress t[>ds meet+ !
 metrics adopt$ by ! ,fed,r,a,m,p       

,program ,managem5t ,(fice pursuant to  
section #cfjh7;e71 z submitt$ to !      
,adm9i/rator by t ,(fice4  #cfjh4 ,roles
 & responsibilities ( ! ,fed,r,a,m,p    
,program ,managem5t ,(fice  7a7         
,implem5tation ,^u delegation f ! ,(fice
 ( ,electronic ,gov]nm5t1 ! ,adm9i/rator
 %all ov]see ! implem5tation (          
,fed,r,a,m,p1 includ+--  7#a7 appo9t+ a 
,program ,director to ov]see !          
,fed,r,a,m,p ,program ,managem5t ,(fice2
  7#b7 hir+ pr(essional /aff z may be   
necess>y = ! effective op]ation ( !     
,fed,r,a,m,p ,program ,managem5t ,(fice1
 & su* o!r activities z are ess5tial to 
prop]ly p]=m critical functions2 &  7#c7
 su* o!r actions z ! ,adm9i/rator may   
det]m9e necess>y to c>ry out ?is        
section4  7b7 ,au?ority & ,duties ,!    
,fed,r,a,m,p ,program ,managem5t ,(fice 
%all h ! foll[+ au?ority & duties3  7#a7
 ,provide guidance to ag5cies1 reg>d+   
compliance ) requirem5ts1 guidel9es1 &  
/&>ds develop$ by ! ,national ,in/itute 
( ,/&>ds & ,te*nology4  7#b7 ,provide   

guidance to ?ird p>ty assessm5t         
organizations 9 us+ & apply+ !          
requirem5ts1 guidel9es1 & /&>ds adopt$  
by ,fed,r,a,m,p4  7#c7 ,provide guidance
 to ag5cies on appropriate use ( &      
acquisition ( ,fed,r,a,m,p approv$      
s]vices1 includ+ ! role ( cl\d brok]s & 
cl\d s]vice integrators4  7#d7 ,9       
consultation ) ! ,director & ! ,secret>y
 ( ,homel& ,security1 issue guidance =  
ag5cies on monitor+ & report+ on ! usage
 & dem& ( cl\d comput+1 use (           
automation1 & use ( comm]cial cl\d      
s]vices to ! fulle/ ext5t practical4    
7#e7 ,9 consultation ) ! ,f$]al ,*ief   
,in=mation ,(fic]1 ov]see & issue       
guidel9es reg>d+ ! qualifications1      
roles1 & responsibilities ( ?ird p>ty   
assessm5t organizations1 9 consultation 
) ! ,national ,in/itute ( ,/&>ds &      
,te*nology4  7#f7 ,develop /&>ds &      
templates1 includ+ a summ>y risk report 
template = ?ird p>ty assessm5t          
organizations t in=ms ! security        
assessm5t report to complem5t ! exi/+   

au?orization package artifacts & s]ve z 
an au?orization decision-mak+ tool4     
7#g7 ,coord9ate ) /akehold]s to provide 
guidance & recomm5dations to            
,fed,r,a,m,p4 ,/akehold]s to include--  
7,a7 ag5cy cl\d cu/om]s2  7,b7 cl\d     
s]vice provid]s2  7,c7 ?ird p>ty        
assessm5t organizations2  7,d7 ag5cy    
,(fices ( ,inspector ,g5]al2 &  7,e7 !  
,gov]nm5t ,acc\ntability ,(fice4  7#h7  
,e/abli% & ma9ta9 a public comm5t       
process = newly issu$ or revis$ guidance
 adopt$ by ,fed,r,a,m,p4  7c7           
,evaluation ( automation proc$ures ,!   
,fed,r,a,m,p ,program ,managem5t ,(fice 
%all assess & evaluate available        
automation proc$ures to accel]ate !     
process+ ( ,fed,r,a,m,p applications4   
7d7 ,metrics = c]tification ,!          
,fed,r,a,m,p ,program ,managem5t ,(fice 
%all adopt specific metrics reg>d+ ! "t1
 co/1 & quality ( ! assessm5ts necess>y 
= completion ( a ,fed,r,a,m,p           
au?orization process 9 a mann] t c be   
consi/5tly track$ ov] "t1 :i* %all be   

done 9 conjunction ) ! p]iodic te/+ &   
evaluation process pursuant to sub*apt] 
,,ii ( *apt] #ce 9 a mann] t m9imizes ! 
ag5cy report+ burd54  #cfji4 ,roles &   
responsibilities ( ! ,jo9t ,au?orization
 ,bo>d  7a7 ,e/abli%m5t ,!re is e/abli%$
 ! ,jo9t ,au?orization ,bo>d :i* %all   
consi/ ( ! ,*ief ,in=mation ,(fic]s or  
_! designees ( ! ,dep>tm5t ( ,def5se1 ! 
,dep>tm5t ( ,homel& ,security1 & !      
,g5]al ,s]vices ,adm9i/ration4  7b7     
,issuance ( provisional au?orizations   
,to op]ate ,! ,jo9t ,au?orization ,bo>d 
%all h ! au?ority to issue provisional  
au?orizations to op]ate to cl\d s]vice  
provid]s t meet ,fed,r,a,m,p security   
guidel9es set =? 9 ! ,common ,security  
,control ,basel9e4  7c7 ,duties ,! ,jo9t
 ,au?orization ,bo>d %all-- 7#a7 review 
& validate cl\d s]vice provid] & ?ird   
p>ty assessm5t organization security    
assessm5t packages2  7#b7 9 consultation
 ) ! ,fed,r,a,m,p ,program ,managem5t   
,(fice1 s]ve z a res\rce = be/ practices
 to accel]ate ! ,fed,r,a,m,p process2   

7#c7 obta9 su* pr(essional /aff z may be
 necess>y = ! effective op]ation (      
,fed,r,a,m,p & su* o!r activities z are 
ess5tial to prop]ly p]=m critical       
functions2  7#d7 su* o!r roles &        
responsibilities z ! ,fed,r,a,m,p       
,program ,managem5t ,(fice may assign1 z
 agre$ to by ! ,fed,r,a,m,p ,program    
,managem5t ,(fice & memb]s ( ! ,jo9t    
,au?orization ,bo>d2 &  7#e7 appo9t     
te*nical repres5tatives responsible =   
,fed,r,a,m,p activities )9 ea* ,jo9t    
,au?orization ,bo>d ag5cy4  #cfaj4      
,roles & responsibilities ( ?ird p>ty   
assessm5t organizations  7a7            
,requirem5ts = c]tification ,!          
,fed,r,a,m,p ,program ,managem5t ,(fice1
 9 consultation ) ! ,jo9t ,au?orization 
,bo>d1 %all det]m9e ! requirem5ts =     
c]tification ( ?ird p>ty assessm5t      
organizations4 ,su* requirem5ts may     
include develop+ or requir+ c]tification
 programs = individuals employ$ by !    
?ird p>ty assessm5t organizations :o    
lead ,fed,r,a,m,p assessm5t teams4  7b7 

,assessm5t ,accr$it$ ?ird p>ty assessm5t
 organizations %all assess1 validate1 & 
atte/ to ! quality & compliance (       
security assessm5t mat]ials provid$ by  
cl\d s]vice provid]s4  7c7 ,summ>y risk 
report ,accr$it$ ?ird p>ty assessm5t    
organizations %all develop a risk report
 t summ>izes ! security assessm5t report
 to complem5t ! exi/+ au?orization      
package artifacts & s]ve z an           
au?orization decision mak+ tool4  #cfaa4
 ,roles & responsibilities ( ag5cies    
7a7 ,9 g5]al ,9 implem5t+ & en=c+ !     
requirem5ts ( ,fed,r,a,m,p1 ,f$]al ag5cy
 cl\d cu/om]s %all-- 7#a7 create        
policies to implem5t ,fed,r,a,m,p       
requirem5ts2  7#b7 issue ag5cy-specific 
au?orizations to op]ate = ,f$]al cl\d   
comput+ s]vices 9 compliance ) sub*apt] 
,,ii ( *apt] #ce2  7#c7 be 9 compliance 
) any ,fed,r,a,m,p requirem5ts1 unless a
 waiv] is issu$ by ! ,director2  7#d7   
provide data to ! ,director on h[       
ag5cies are meet+ metrics z def9$ by !  
,fed,r,a,m,p ,program ,managem5t ,(fice 

pursuant to section #cfad7;b72 &  7#e7  
if applicable1 ensure t any contract is 
9 compliance ) ,fed,r,a,m,p requirem5ts4
  7b7 ,submission ( policies requir$ ,n 
lat] ?an #f mon?s aft] ! date ( !       
enactm5t ( ?is section1 ,f$]al ag5cy    
cl\d cu/om]s %all submit to ! ,director 
! policies creat$ pursuant to subsection
 7a77#a7 = review & approval4  7c7      
,submission ( au?orizations ,to op]ate  
requir$ ,^u issuance ( an au?orization  
to op]ate1 ! head ( ! relevant ag5cy    
%all provide a copy ( ! au?orization to 
op]ate lett] to ! ,fed,r,a,m,p ,program 
,managem5t ,(fice & ! cl\d s]vice       
provid] to enable ! ,fed,r,a,m,p        
,program ,managem5t ,(fice to track &   
assess all =ms ( au?orizations to op]ate
 on a ,gov]nm5twide basis4  7d7         
,presumption ( adequacy ,any provisional
 au?orization to op]ate issu$ by ! ,jo9t
 ,au?orization ,bo>d %all be consid]$ to
 be presumptively adequate by ag5cies1  
subject to te*nical or programmatic     
rebuttal by an ag5cy t disagrees )      

adequacy or suffici5cy ( ! c]tification4
 ,?is rebuttable presumption ( adequacy 
%all n d]ogate1 modify1 or alt] !       
responsibility ( any ag5cy to ensure    
compliance ) ! sub*apt] ,,ii ( *apt] #ce
 = any ,f$]al cl\d comput+ s]vices t !  
ag5cy deploys4  7e7 ,waiv] or exception 
,! ,*ief ,in=mation ,(fic] ( ea* ag5cy  
may reque/ a waiv] or exception to      
specific ,fed,r,a,m,p requirem5ts4 ,su* 
reque/ = waiv] %all be 9 accordance ) ! 
det]m9ations & f9d+ issu$ "u section    
#cfab7b74 ,! det]m9ation & f9d+s %all be
 submitt$ to ! ,fed,r,a,m,p ,program    
,managem5t ,(fice & ! ,director1 along )
 su* support+ articles z may be requir$ 
"u guidel9es issu$ by ,fed,r,a,m,p4  7f7
 ,ag5cy reports requir$ ,n lat] ?an #ij 
days aft] ! date ( :i* any guidance is  
issu$ pursuant to section #cfjh7;b77#d7 
f ! ,fed,r,a,m,p ,program ,managem5t    
,(fice1 ! head ( ea* ag5cy %all submit  
to ! ,director a report on cl\d comput+ 
usage & ! pot5tial dem& = cl\d comput+4 
#cfab4 ,roles & ,responsibilities ( !   

,(fice ( ,managem5t & ,budget ,!        
,director %all h ! foll[+ duties3 7#a7  
,highlight curr5t guidance or issue new 
guidance to ensure t an ag5cy does n    
op]ate a ,f$]al ,gov]nm5t cl\d comput+  
s]vice us+ ,gov]nm5t data )\t issu+ an  
au?orization to op]ate issu$ by ! ag5cy 
t meets ! requirem5ts ( sub*apt] ,,ii ( 
*apt] #ce & ,fed,r,a,m,p4  7#b7 ,issue  
guidance & templates = ag5cy            
det]m9ations & f9d+s = waiv]s to !      
requirem5ts ( ,fed,r,a,m,p 7any reque/  
by an ag5cy = su* a waiv] mu/ set =?    
unique ag5cy-specific te*nical1         
op]ational1 or manag]ial requirem5ts    
necess>y = ag5cy op]ations74  7#c7      
,def9e alt]natives & ag5cy be/ practices
 = compliance ) ! ,tru/$ ,int]net       
,connection = ag5cies connect+ to a cl\d
 s]vice provid]4  7#d7 ,grant waiv]s or 
exceptions to specific ,fed,r,a,m,p     
requirem5ts z may be necess>y by !      
submission ( ag5cy det]m9ations & f9d+s 
t meet ! ,,omb guidel9es = ,fed,r,a,m,p 
waiv]s pursuant to p>agraph 7#b74  7#e7 

,ensure ag5cies are 9 compliance ) any  
guidance or o!r requirem5ts issu$ relat$
 to ,fed,r,a,m,p4  #cfac4 ,fund+ (      
,fed,r,a,m,p ,! ,fed,r,a,m,p ,program   
,managem5t ,(fice may1 to ! ext5t deem$ 
appropriate by ! ,adm9i/rator & 9       
consultation ) ! ,director1 use funds   
conta9$ )9 ! ,acquisition ,s]vices ,fund
 describ$ "u section #cba ( title #dj or
 su* o!r funds z may be available = !   
op]ations ( ,fed,r,a,m,p4  #cfad4       
,report+  7a7 ,9 g5]al ,n lat] ?an #ah  
mon?s aft] ! date ( ! enactm5t ( ?is    
section1 & annually !reaft]1 ! ,director
 %all submit to ! ,committee on         
,ov]sight & ,gov]nm5t ,re=m ( ! ,h\se ( 
,repres5tatives & ! ,committee on       
,homel& ,security & ,gov]nm5t ,affairs (
 ! ,s5ate a report t includes ! foll[+3 
7#a7 ,! /atus1 effici5cy1 & effectiv5ess
 ( ,fed,r,a,m,p dur+ ! prec$+ ye> 9     
au?oriz+ & rec]tify+ secure cl\d        
solutions = ,f$]al ag5cy cl\d cu/om]s4  
7#b7 ,! l5g? ( "t = ,f$]al ag5cy cl\d   
cu/om]s to issue au?orizations to op]ate

 dur+ ! prec$+ ye>4  7#c7 ,ag5cy reque/s
 = ,fed,r,a,m,p waiv]s4  7#d7 ,progress 
dur+ ! prec$+ ye> 9 advanc+ automation  
te*niques to securely automate          
,fed,r,a,m,p processes & to accel]ate   
report+ z describ$ 9 ?is section4  7#e7 
,numb] ( cl\d comput+ sy/ems 9 use at   
ea* ag5cy & ! numb] ( cl\d comput+      
au?orizations to op]ate4  7b7 ,,gao     
report ,n lat] ?an #b ye>s aft] ! date (
 enactm5t ( ?is section1 & e ?ree ye>s  
!reaft]1 ! ,comptroll] ,g5]al %all      
submit to ! ,ov]sight & ,gov]nm5t ,re=m 
,committee ( ! ,h\se ( ,repres5tatives &
 ! ,homel& ,security & ,gov]nm5tal      
,affairs ,committee ( ! ,s5ate an       
assessm5t ( ,fed,r,a,m,p1 ?ird p>ty     
assessm5t organizations1 & ,f$]al ag5cy 
cl\d cu/om]s1 includ+ ! foll[+3  7#a7   
,an evaluation ( ! impact & cont9u+ ne$ 
= specific cl\d security controls4  7#b7
 ,a review ( ! adequacy ( res\rces to   
run ,fed,r,a,m,p4  7#c7 ,! developm5t ( 
reusability & ! pot5tial = ! use &      
adoption ( reciprocal /&>ds1 :e!r f     

,gov]nm5t or ! private sector1 z        
sub/itutes = specific security controls 
9 use by ! ,fed,r,a,m,p ,project        
,managem5t ,(fice4  #cfae4 ,def9itions  
7a7 ,9 g5]al ,except z provid$ "u       
p>agraph 7#b71 ! def9itions "u sections 
#cejb & #ceeb apply to sections #cfjg   
?r\gh #cfad4  7b7 ,additional def9itions
 ,9 sections #cfjg ?r\gh #cfad3 7#a7    
,adm9i/rator ,! t]m ,adm9i/rator means !
 ,adm9i/rator ( ,g5]al ,s]vices4  7#b7  
,cl\d brok] ,! t]m cl\d brok] means an  
entity t manages ! use1 p]=mance1 &     
deliv]y ( cl\d comput+ s]vices &        
negotiates relation%ips betwe5 cl\d     
s]vice provid]s & cl\d consum]s4  7#c7  
,cl\d comput+ ,! t]m cl\d comput+ means 
a model = enabl+ ubiquit\s1 conv5i5t1   
on-dem& network access to a %>$ pool (  
configurable comput+ res\rces 7su* z    
networks1 s]v]s1 /orage1 applications1 &
 s]vices7 t c be rapidly provision$ &   
releas$ ) m9imal managem5t ef=t or      
s]vice provid] int]action 7z def9$ by ! 
,national ,in/itute ( ,/&>ds &          

,te*nology pursuant to ! ,national      
,in/itute ( ,/&>ds & ,te*nology ,act    
7#ae ,u4,s4,c4 #bgh;g-#c71 includ+ ,,ni/
 ,special ,publication #hjj-ade7 or any 
successor !reto4  7#d7 ,cl\d s]vice     
integrator ,! t]m cl\d s]vice integrator
 means a sy/ems or s]vice integrator t  
specializes 9 cl\d comput+ s]vices4     
7#e7 ,cl\d s]vice provid] ,! t]m cl\d   
s]vice provid] means a ?ird p>ty entity 
(f]+ cl\d comput+ s]vices to ! ,f$]al   
,gov]nm5t4  7#f7 ,common security       
control basel9e ,! t]m common security  
control basel9e means ! guidance issu$  
pursuant to section #cfjg7;c77#b74  7#g7
 ,director ,! t]m ,director means !     
,director ( ! ,(fice ( ,managem5t &     
,budget4  7#h7 ,f$]al ag5cy cl\d cu/om] 
,! t]m ,f$]al ag5cy cl\d cu/om] means an
 ag5cy us+ cl\d comput+ s]vices4  7#i7  
,f$]ally controll$ in=mation sy/em ,!   
t]m f$]ally controll$ in=mation sy/em or
 ,f$]al in=mation sy/em means an        
in=mation sy/em us$ or op]at$ by a      
,f$]al ag5cy cl\d cu/om] z set =? & 9   

compliance ) ! guidel9es & requirem5ts (
 section #ceed ( title #dj4  7#aj7      
,f$]al ,gov]nm5t cl\d comput+ s]vices ,!
 t]m ,f$]al ,gov]nm5t cl\d comput+      
s]vices means a cl\d comput+ s]vice t is
 us$ or op]at$ by a ,f$]al ag5cy cl\d   
cu/om] ^u a f$]ally controll$ in=mation 
sy/em4  7#aa7 ,fed,r,a,m,p ,! t]m       
,fed,r,a,m,p means ! ,f$]al ,risk &     
,au?orization ,managem5t ,program       
e/abli%$ "u section #cfjg7;a74  7#ab7   
,fed,r,a,m,p ,program ,managem5t ,(fice 
,! t]m ,fed,r,a,m,p ,program ,managem5t 
,(fice means ! (fice t adm9i/]s         
,fed,r,a,m,p4  7#ac7 ,fed,r,a,m,p       
security controls basel9e ,! t]m        
,fed,r,a,m,p security controls basel9e  
means ^? security controls t cl\d s]vice
 provid]s & ag5cies mu/1 at a m9imum1   
address to receive a provisional        
au?orization to op]ate1 z def9$ by !    
,fed,r,a,m,p ,program ,managem5t ,(fice4
  7#ad7 ,jo9t ,au?orization ,bo>d ,! t]m
 ,jo9t ,au?orization ,bo>d means ! ,jo9t
 ,au?orization ,bo>d e/abli%$ "u section

 #cfji4  7#ae7 ,te*nical repres5tative  
,! t]m te*nical repres5tative means an  
ag5cy's te*nical repres5tative to !     
,jo9t ,au?orization ,bo>d designat$ by !
 memb] ag5cy ( ! ,jo9t ,au?orization    
,bo>d4  7#af7 ,?ird p>ty assessm5t      
organization ,! t]m ?ird p>ty assessm5t 
organization means a ?ird-p>ty          
organization accr$it$ by ! ,program     
,director ( ! ,fed,r,a,m,p ,program     
,managem5t ,(fice to und]take con=mity  
assessm5ts ( cl\d s]vice provid]s4  4   
7b7 ,te*nical & con=m+ am5dm5t ,! table 
( sections = *apt] #cf ( title #dd1     
,unit$ ,/ates ,code1 is am5d$ by add+ at
 ! end ! foll[+ new items3  #cfjg4      
,f$]al ,risk & ,au?orization ,managem5t 
,program4 #cfjh4 ,roles &               
responsibilities ( ! ,fed,r,a,m,p       
,program ,managem5t ,(fice4 #cfji4      
,roles & responsibilities ( ! ,jo9t     
,au?orization ,bo>d4 #cfaj4 ,roles &    
responsibilities ( ?ird p>ty assessm5t  
organizations4 #cfaa4 ,roles &          
responsibilities ( ! ag5cies4 #cfab4    

,fund+ ( ,fed,r,a,m,p4 #cfac4 ,report+4 
#cfad4 ,def9itions4  4